When testing the interface with authentication, it is easy for us to use the token, and we can directly create an api to return the token, but I don't know how to create an api to obtain the value of the session based on the session, so we need to simulateLogin, but I'm having trouble with CSRF in the login form submission when simulating login.