CVE-2021-41275: CSRF in Spree Auth Devise | NextGuard