Stateless session manager, Csrf intercepter