CVE-2021-41274: CSRF in solidus_auth_devise | NextGuard