Hydra Notes: Sessions, Auth, and CSRF

Three packages that only make sense together. A session split into two interfaces, a guard that keeps exactly one id in it, and a token that has to come back signed. How logging in actually works in Hydra.