I understand the idea of generating a form token and storing it in a session, and also putting it as a hidden input in my forms.
But how could I make this work if I have pages with multiple forms, is it still safe to use the same token for each form?
And I still feel weary about bots and stuff on my website, can these form tokens really safely replace CAPTCHAs?