// when the request comes in, decide whether it needs to be handled and then how.  The Guard does it all.
 private void HandleRequest(object sender, EventArgs args)
 {
     _guard = new CSRFGuard(sender);
     // save session for later use when filtering the response
     _session = new Token(_guard.CsrfTokenName, _guard.CsrfTokenValue);
 }
 // when the request comes in, decide whether it needs to be handled and then how.  The Guard does it all.
 private void HandleRequest(object sender, EventArgs args)
 {
     _guard = new CSRFGuard(sender);
     // save session for later use when filtering the response
     _session = new Token(_guard.CsrfTokenName, _guard.CsrfTokenValue);
 }