[FrameworkBundle] security.secure_random is avaible without csrf enabled