Using a factory instead will be easier on consumers of the library. The factory method will require the token. _Originally posted by @ericfortmeyer in https://github.com/phpolar/csrf-protection/issues/74#issuecomment-1555994198_