Cross-site request forgery token erstellen
content security policy