Your App Is NOT Secure If You Don’t Use CSRF Tokens