get csrf

Request

• Base URL
  /api (relative, and the document was published on a file host, not at the API’s origin)
• URL
  /api/csrf
• Auth
  none declared