code: func Token(c context.Context) (string, error) {
  	return xsrfToken.Generate(c, state(c), nil, 0)
  }
docs: // Token generates new XSRF token bound to the current caller.
  //
  // The token is URL safe base64 encoded string. It lives for 4 hours and may
  // potentially be used multiple times (i.e. the token is stateless).
  //
  // Put it in hidden form field under the name of "xsrf_token", e.g.
  // <input type="hidden" name="xsrf_token" value="{{.XsrfToken}}">.
  //
  // Later WithTokenCheck will grab it from there and verify its validity.