3. CSRF token is tied to session but shared - Asecurity Academy 3. CSRF token is tied to session but shared - Asecurity Academy