Use improved token generator.
Quick conversion of Zikula Session code to HttpFoundation session.
Temporary handling for the installer because of new Session driver.
Update changelog
Merge pull request #695 from drak/session

Add garbage collection to CSRF token generator/validator