I have a very long web form that could take hours for people to complete. The problem with this is when people take too long the CSRF token expires before they're done and when they hit submit they get a 403 error.
To fix this issue I'm thinking of doing an AJAX request every hour to update the session and extend the token expiry. Are there any security concerns with doing this? Or are there any better ways of handling this situation?