2:   Shared app core: API client (CSRF), auth guard, layout chrome,
48:const CSRF = {
49:  get() { return getCookie("mailer_csrf"); },
68:  if ((opts.method || "GET").toUpperCase() !== "GET") headers["X-CSRF-Token"] = CSRF.get();
---
{"detail":"Not Found"}