Adding controller and action into _before.extra info
Added CSRF token invalidation