Protect the logout link against CSRF attacks

There is a know CSRF weakness in the logout menu link. This menu link performs an action (logout the user) without any confirmation or protection. The core issue is 🐛 User logout is vulnerable to CSRF Fixed .

Due to a bug in the Drupal 6 menu system ( #204077: Allow menu links pointing to dynamic paths → ), it is unlikely that a proper fix will land in D6 in a reasonable period of time. I still have hope that we will fix Drupal 7 menu system and implement a fix against the CSRF properly there. This is a Drupal 6 specific feature request to implement the same CSRF protection in logintoboggan.