title: csrf token using
body: <p>I'm interested in a protecting of my web application by using generation a csrf token. My question is how do I need to send that token back to a server: using query param or http header x-csrf-token ? </p>
  
  <p>And what is the difference</p>