Cookie Security Considerations for CSRF attacks
CSRF attacks, by definition, usually involve abusing the fact that the user is already logged in on a site: i.e that a malicious form can submit some request to your website, using the user's existing session.