Re: [Wikitech-l] [RFC] Giving actual CSRF tokens to not logged in users (T40417)