Replacing $_SESSION['sec_token'] with Security::getCurrentToken()