-record(html_request, { session_id :: binary(), route :: binary(), csrf_token :: binary(), origin :: binary() }).