CSRF where token is tied to non-session cookie 1 CSRF where token is tied to non-session cookie 09/03/2025