https://canalqb.blogspot.com/2023/04/python-html-token-csrf.html