based on conversation at http://www.eschrade.com/page/generating-secure-cross-site-request-forgery-tokens-csrf/ start using openssl and mcrypt. fall back to mt_rand last. base64 encode the result regardless.
Merge branch 'develop' of github.com:auraphp/Aura.Session into develop