https://github.com/weavejester/ring-anti-forgery/blob/master/src/ring/middleware/anti_forgery.clj#L12 (get-in request [:session "anti-forgery-token"])