Settings: New Site.csrfExpires setting

End users can now configure their token expiry policy as needed.
Closes #344

Setting is rendered as such:

![CSRF](https://f.cloud.github.com/assets/39490/296693/b77e2d84-950d-11e2-8b10-2024c3ba722e.png)