CSRF Protection in Laravel explained
Barry vd. Heuvel
197

Good to read. Timing attack is something I’ve never thought about.