[Security\Csrf] Split CsrfTokenGenerator into CsrfTokenManager and TokenGenerator