title: Where is the csrftoken stored in Django database?
body: <p>Where is the <code>csrftoken</code> stored?</p>
  <p>When I access an API endpoint (logout API, it do not need the params):</p>
  <pre><code>POST /rest-auth/logout/ HTTP/1.1
  Host: 10.10.10.105:8001
  Connection: keep-alive
  Content-Length: 0
  Accept: application/json, text/plain, */*
  Origin: http://localhost:8080
  Authorization: Token 0fe2977498e51ed12ddc93026b08ab0b1a06a434
  User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36
  Referer: http://localhost:8080/register
  Accept-Encoding: gzip, deflate
  Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
  Cookie: sessionid=b95zopro0qvkrexj8kq6mzo1d3z2hvbl; csrftoken=z53lKL0f7VHkilYS5Ax8FMaQCU2ceouje9OeTJOgTy4gH0UgHVltAlOe2KFNNNB6 
  </code></pre>
  <p>the header is upper. In the Response I get an error:</p>
  <pre><code>{&quot;detail&quot;:&quot;CSRF Failed: CSRF token missing or incorrect.&quot;}
  </code></pre>
  <p>So, the backend must have verified the <code>csrftoken</code>.</p>
  <p>In the backend database, I can not find the <code>csrftoken</code> field:</p>
  <p><a href="https://i.stack.imgur.com/Z2Llo.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Z2Llo.jpg" alt="enter image description here" /></a></p>
  <p>So I want to know where it is saved in the encrypted <code>session_data</code>?</p>