If We Validate User Is Logged In or Not, Do We Still Need To Use FORM Tokens To Avoid CSRF Attacks?

Question

Let\'s assume when a form is submitted, a request is sent to FormToDatabase.php

FormToDatabase.php verifies if the user is logged in or not using