adding enhanced csrf protection

app-code/api/login/delete_keepmeloggedin.php

@@ -2,7 +2,12 @@
 include "../utils/security.php";
 secure_session_start();
 require_same_origin_request();
+require_csrf_token();
 header('Content-Type: application/json');
+if ($_SERVER['REQUEST_METHOD'] !== 'POST' && $_SERVER['REQUEST_METHOD'] !== 'DELETE') {
+	echo json_encode(['success' => false, 'message' => 'Invalid request method.']);
+	exit;
+}
 $send_to=$_SESSION["end_url"];
 require_logged_in();