RedRays Team 14 years ago XSRF protection for applications based on WebClient UI, SAP security note 1532369