This is a question about generating CSRF tokens.
Usually I\'d like to generate a token based off of a unique piece of data associated with the user\'s session, and h
CSRF utilizes the user's session, so, if you don't have one, there is no CSRF.