basic CSRF token structure and implementation for batch transactions