Checking cookies…
Protected by CSRF & one-time attempt key.