Updated the CSRF middleware handle method, instead of throwing exception, we flush session, log user out