pub const CSRF_SESSION_KEY: &str = "_actix_admin_csrf";
Session storage key. Public so applications can inspect/clear the token.