	public static function startup()
	{
		//Override the default expire time of token
		\CsrfMagic\Csrf::$expires = 259200;
		\CsrfMagic\Csrf::$callback = function ($tokens) {
			throw new \App\Exceptions\AppException('Invalid request - Response For Illegal Access', 403);
		};
		$js = 'vendor/yetiforce/csrf-magic/src/Csrf.min.js';
		if (!IS_PUBLIC_DIR) {
			$js = 'public_html/' . $js;
		}
		\CsrfMagic\Csrf::$dirSecret = __DIR__;
		\CsrfMagic\Csrf::$rewriteJs = $js;
		\CsrfMagic\Csrf::$cspToken = \App\Session::get('CSP_TOKEN');
		\CsrfMagic\Csrf::$frameBreaker = \Config\Security::$csrfFrameBreaker;
		\CsrfMagic\Csrf::$windowVerification = \Config\Security::$csrfFrameBreakerWindow;

		/*
		 * if an ajax request initiated, then if php serves content with <html> tags
		 * as a response, then unnecessarily we are injecting csrf magic javascipt
		 * in the response html at <head> and <body> using csrf_ob_handler().
		 * So, to overwride above rewriting we need following config.
		 */
		if (static::isAjax()) {
			\CsrfMagic\Csrf::$frameBreaker = false;
			\CsrfMagic\Csrf::$rewriteJs = null;
		}
	}
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.