Security for fullstack developers: CSRF, cookies, and sessions | Hacker News Reader