APPWEB-169: XSRF Token management