fix session CSRF cookie detection
Merge pull request #476 from ikkez/fix-csrf-cookie

fix session CSRF cookie detection