API: Outdated comment?

[ebroda]

Description of the issue

The following comment feels outdated, as it simply works with the Token that OEP is providing for API calls. If that's the case, I'd hardly suggest to remove the comment to avoid confusion while debugging code.

oeplatform/api/views.py

Lines 401 to 405 in be12447

	Every request to unsave http methods have to contain a "csrftoken".
	This token is used to deny cross site reference forwarding.
	In every request the header had to contain "X-CSRFToken"
	with the actual csrftoken.
	The token can be requested at / and will be returned as cookie.

Context and Environment

• Version used: current

Workflow checklist

• I am aware of the workflow in CONTRIBUTING.md