Rewiring CSRF protection and movign some functionality to the bootstrapping stage.

helpers/session/loader.go

@@ -0,0 +1,20 @@
+package helpers
+
+import (
+	"bytes"
+	"os"
+)
+
+func LoadKeyFromFile(path string) ([]byte, error) {
+	key, err := os.ReadFile(path)
+	if err != nil {
+		return nil, err
+	}
+	return bytes.TrimSpace(key), nil
+}
+
+func ZeroBytes(b []byte) {
+	for i := range b {
+		b[i] = 0
+	}
+}