Injecting the token into the middleware seems simpler than using a factory. _Originally posted by @ericfortmeyer in https://github.com/phpolar/csrf-protection/issues/75#issuecomment-1556089528_