luci-app-ocserv: protect disconnect action with csrf token