Use Cookie + hidden field csrf protection schema.
Use Cookie + hidden field csrf protection schema.