implement refresh_authenticity_token

prevent replay attacks etc