Comment by mrmagooey

Isn't JWT a modern alternative to CSRF tokens?