It’s here : System -> Configuration -> ADVANCED -> Admin -> Security -> Add Secret Key to URLs