. . . . "This guarantees that the request validation is triggered before data such as cookies and URLs are accessed during the request." .