app.js
pages
===
49:  get() { return getCookie("mailer_csrf"); },
62:  if ((opts.method || "GET").toUpperCase() !== "GET") headers["X-CSRF-Token"] = CSRF.get();