https://www.jenkins.io/doc/book/managing/security/#cross-site-request-forgery