[Bug 937786] CVE-2015-5395: lack of CSRF protection in sogo