Thank you for writing to us about this. This isn’t our final response here, but in the interest of being transparent and keeping lines of communication open, we wanted to respond with something as soon as possible. While this isn’t the answer you’ve been looking for, we wanted to update you on so...

Alright here is my proposal: Use a hash of a login token as the anti-CSRF token. Why this is a good idea? Prevents having to store anything extra on the client, the server, and less network traffic as we don't need to transfer an additional cookie on every request All the benefits of cookie b...