Prior has been used shiro, just started using security, big brother also do not Tucao
security enabled by default csrf protection, that is, the so-called pseudo-csrf request. We just need him close enough (because our system is in its own network to use, people will not have an external attack, so close to direct ok)
As a perfect solution, and so this project finished thing, in my research on the study make up ^ _ ^