feat(auth): 增加登录验证和五天会话

static/js/weapi.js

@@ -21,7 +21,11 @@
     };
     const send = base => fetch(makeUrl(base).toString(), {
       method,
-      headers: { Accept: 'application/json', ...(body ? { 'Content-Type': 'application/json' } : {}) },
+      headers: {
+        Accept: 'application/json',
+        ...(body ? { 'Content-Type': 'application/json' } : {}),
+        ...(['POST', 'PUT', 'PATCH', 'DELETE'].includes(method) ? { 'X-CSRF-Token': global.document.querySelector('meta[name="csrf-token"]')?.content || '' } : {}),
+      },
       ...(body ? { body: JSON.stringify(body) } : {}),
     });
     let response = await send(BASE);