detect malformed csrf, rebuild