CSRF tokens != login sessions != persistent HTTP connections. There is no need to keep an HTTP connection open in order for the server to log people in or reco

CSRF tokens != login sessions != persistent HTTP connections. There is no need to keep an HTTP connection open in order for the server to log people in or recognize when a valid token has been submitted with a form.