Mail.ru: CSRF Send a message at street-combats.mail.ru

Hi again, I have that there is no CSRF token when sending a new message so you can CSRF anyone and make him send a message to anyone : this is the code...