pub async fn validate_csrf_expiry(
    user_input: &str,
    session: &mut Session
) -> bool