server/lib/private/security/csrf/tokenstorage
..
sessionstorage.php