per request crsf tokens
a little closer to what we are looking for
working PoC
adding crsf token to results
adding search form to results page. shotgun you"re a salty bitch
moving crsf token to stand alone cookie