* CSRF session cookie. This method is itself exempted from CSRF checking.
*/
public String generateId()
{
WebContext webContext = WebContextFactory.get();
IdGenerator idGenerator = webContext.getContainer().getBean(IdGenerator.class);
return idGenerator.generate();
}