hmac-csrf
sessionless csrf with origin check, falling back to cookie based hmac token when origin is not present
sessionless csrf with origin check, falling back to cookie based hmac token when origin is not present
A javascript gateway adapter for the MAGIC protocol