Session: echo antiCsrf on check failed