Replace HttpException with BadRequestHttpException in CSRF validation

[desarrolla2]

Substitute HttpException with BadRequestHttpException to more accurately indicate a bad request (HTTP 400) error during CSRF token validation.

Subject

This PR refactors the CSRF token validation in the validateCsrfToken method by replacing HttpException with BadRequestHttpException. This change improves clarity by accurately indicating an HTTP 400 error when an invalid CSRF token is detected.

I am targeting this branch because the change is backward compatible and addresses an improvement in error semantics without breaking any existing functionality.

Changelog

### Changed
- Replaced the commented-out `HttpException` with `BadRequestHttpException` in the `validateCsrfToken` method to properly reflect an HTTP 400 error for invalid CSRF tokens