pub const CSRF_FIELD: &str = "_csrf";
Name of the hidden form field that carries the per-session CSRF token.