implementation("io.ktor:ktor-server-csrf:3.5.2")
CSRF protection middleware: configurable token generation, cookie/header validation, rotation and same-site support.