PHP TestedCSRF token generation and verificationProtect state-changing forms with a per-session token compared in constant time.