security defence


git-svn-id: http://xe-core.googlecode.com/svn/branches/luminous@12510 201d5d3c-b55e-5fd7-737f-ddc643e51545
CSRF defence modify


git-svn-id: http://xe-core.googlecode.com/svn/branches/luminous@12511 201d5d3c-b55e-5fd7-737f-ddc643e51545