refactored Request::validateCsrfToken().