security #token :  Remove the use of cookies to carry the synchronizer token. Validate the synchronizer token for the user session only with POST/PUT/DELETE HTTP requests and no more the GET HTTP requests.