rules already regex, no need to modify in client side js

#modification: in case of mod_csrfp we have regex already in best form
unlike in csrf protector php