Fixed issue #8922: KCFinder CSRF not always working