Added 'ECSRFTOKENINVALID' to indicate validation failure

My intention was to implement an easy way to process possible attack attempts without a need for error handling - which would be a bit tricky due to their asynchronous nature.
you shouldntve commited this :)