I was searching around about CSRF attacks and I am thinking about the "random form token" prevention concept.
Let's say every form has a "hidden token" inside and the server checks the token before anything else. Now let's say there is a form
http://myWebsite.e.x/acccount/edit and it's supposed to be submitted.
What am I missing here?