SEC-2286: Log invalid CSRF tokens at debug level