- emit event when csrf fail
- cluster csrf token and id into appData