gratipay/gratipay.com — pull request #3031 by whit537 (2014-12-22 21:52:35+00:00)
Title: Document why we don't set httponly on csrf_token

Closes #3030.