Logic behind CSRF token creation and verification. - View it on GitHub