I'm building a form-based authentication system for a Quixote-based website and was wondering what role (if any) do form tokens play in user authentication? The form tokens I'm referring to are the random numbers returned by Session.create_form_token() in the session module. Thank you, Salman