package core var CSRF_KEY = []byte("32-byte-long-auth-key")