SecurityInnovation/TMContentReview — Issue #146: Include Unique Tokens in HTTP Requests
Author: SergeTruth
Created: 2011-11-07 23:03:41+00:00
State: open

I would make sure to stress that the unique token is NOT the session id.