Hacker News Reader

no you don't unless authentication is needed. How is post request and cookie even related? It is simple web dev 101.

You need to store some kind of state if you want to protect the form from CSRF attacks. You usually want to protect the form.

You don't need a cookie for that though... Even a window variable would suffice