OAuth Session Management & Anti‑CSRF | Blocks and Arrows | Blocks And Arrows