CSRF Cookie

Complete this note with auth methods and how they are implemented are resources.

https://security.stackexchange.com/questions/166724/should-i-use-csrf-protection-on-rest-api-endpoints