[aerogear-issues] [JBoss JIRA] (AEROGEAR-716) Url and Forms that perform important operations must be protected by random tokens (hidden nonce values)