Merge pull request #13665 from cakephp/issue-13661

Cleanup CSRF protection token too in Router::reverseArray().

src/Routing/Router.php

@@ -852,6 +852,7 @@ class Router
             $params['requested'],
             $params['return'],
             $params['_Token'],
+            $params['_csrfToken'],
             $params['_matchedRoute'],
             $params['_name']
         );

tests/TestCase/Routing/RouterTest.php

@@ -2792,7 +2792,8 @@ class RouterTest extends TestCase
             'bare' => 1,
             'return' => 1,
             'requested' => 1,
-            '_Token' => ['key' => 'sekret']
+            '_Token' => ['key' => 'sekret'],
+            '_csrfToken' => 'foo',
         ];
         $result = Router::reverse($params);
         $this->assertEquals('/posts/view/1', $result);