Move csrf_verify() call out of _sanitize_globals()

It doesn't belong in there.
1 file changed