Fixed CSRF validation bug.
refactored Request::validateCsrfToken().