code: func VerifyToken(token string, r *http.Request) error {
  	realToken, err := ExtractTokenFromCookie(r)
  	if err != nil {
  		return trace.Wrap(err, "unable to extract CSRF token from cookie")
  	}
  
  	decodedTokenA, err := decode(token)
  	if err != nil {
  		return trace.Wrap(err, "unable to decode CSRF token")
  	}
  
  	decodedTokenB, err := decode(realToken)
  	if err != nil {
  		return trace.Wrap(err, "unable to decode cookie CSRF token")
  	}
  
  	if !compareTokens(decodedTokenA, decodedTokenB) {
  		return trace.BadParameter("CSRF tokens do not match")
  	}
  
  	return nil
  }
docs: // VerifyToken validates given token based on HTTP request cookie