loggingService.startTimer(LoggingService.TIMER_DESERIALIZATION);
try {
message = serializationService.read(new StringReader(msg), Message.class);
} finally {
loggingService.stopTimer(LoggingService.TIMER_DESERIALIZATION);
}
// The bootstrap action cannot not have a CSRF token so we let it
// through
boolean isBootstrapAction = false;