@ kernel/security/security.php: making Cross-site Request Forgery solid prevent almost done