GET /claim HTTP/2 200 
csrf_len 64 cookie_present yes
POST /claim HTTP/2 302  location: /