Comment Comment by mark_story That's fair, not having a cookie could work for session, how would you handle CSRF protection on a login form without cookies? parent mark_story 2 years ago
