[Fire-Dragon-DoL]

This is with server side rendering, right? What do you use to "secure" go?

I'm familiar with go, but I always write JSON apis with it, not SSR.

In rails protect from forgery ensures csrf token is put in there to ensure security and authentication is provided by devise, or omniauth or the framework, but if I wanted to roll my own the framework provides tools to safely compare password hashes to avoid timing attacks. Is there anything similar for Go? I'd love to write my next project with that instead of Rails.

Ideally, I also need an "admin UI" of some sort (activeadmin in rails)