Verifies that a valid CSRF token has been submitted with the request. Any route that performs actions or operations that do not use a form callback should use a CSRF token to prevent replay attacks. In order for the token to be added correctly, the URL must be generated using the url_generator service rather than a manually constructed path.