[Koha-bugs] [Bug 34451] Add CSRF protection to REST API