If we make calls (service) from same website console, can be considered as CSRF attack or not? Here we are using csrf cookie ( samesite attribute set to true), but we are invoking service from the same website but manually from web console. Is this come under CSRF or it is valid?