Use openssl_random_pseudo_bytes to generate token Security class, if available. Fixed #4709.
Fixed typo in comments
Merge pull request #354 from stidges/3.3/feature/4709-secure-csrf-token

refs #4709: openssl_random_pseudo_bytes in Security::token