# Enable stateless CSRF protection for forms and logins/logouts framework: form: csrf_protection: token_id: submit csrf_protection: enabled: true