Version 0.4.0

- switch from md5 to sha256 for HMACs
- rename csrf_* functions to req_token_generate/req_token_verfiy
- update csrf_* tests to req_token_* tests