Notes, deep-dives, and tutorials.
A no-magic walkthrough of how the cookie + CSRF dance actually works.