Closes ticket #6: Setting session value rule to xsrf protection item now prohibits creating a new one on validate