Future work is to enforce CSRF Co-authored-by: Presley Pizzo <presley@coder.com>
Fixes coder/security#1.