Update csrf.rb

add check form.action is null or jsp file