pub fn verify(ctx: &ReqCtx, submitted: Option<&str>) -> bool
True when the submitted field matches the cookie. Both must be present and non-empty, so a request that carries neither is rejected rather than passed.