id => C4::Context->userenv->{id},
secret => md5_base64( C4::Context->config('pass') ),
token => scalar $query->param('csrf_token'),
MaxAge => 10,
});
}
-