5372c9
Rather than deleting the csrf_token, reset it This will allow to know if it was missing or not but won't be leaking it