[aerogear-issues] [JBoss JIRA] (AGSEC-3) Url and Forms that perform important operations must be protected by random tokens (hidden nonce values)