framework: secret: s3cr3t csrf_protection: ~ form: ~ session: ~