Notes about caching pages with a CSRF Form

| Q             | A
| ------------- | ---
| Doc fix?      | no
| New docs?     | no
| Applies to    | all
| Fixed tickets | #1216
the real issue is not that it uses the session id, but that CSRF token are meant to be different for each user (whatever way you use to generate them and validate them)