CSRF Protection Test

How this test works:

• • The green button uses csrfFetch() which automatically includes the CSRF token
• • The red button uses regular fetch() without the CSRF token
• • Valid requests should succeed, invalid requests should be blocked