Menu token protect (CSRF protection)