-record(protection_context, { session_id :: binary(), owner :: binary(), route :: binary(), csrf_token :: binary(), origin :: binary() }).