Simplify CSRF State Check