7215

check token to avoid CSRF - refs BT#7215