[BUGFIX] Fix use of removed Environment methods in CsrfProtectionAspect
CsrfProtectionAspect now no longer uses methods from environment that
no longer exist since the environment cleanup. It tries to get the
arguments from the active RequestHandler instead.