Correction bug in csrf detection