CSRF
CSRF copied to clipboard
Request with no session key gets last session object
Moving https://github.com/vapor/vapor/issues/1984 here.