Use safer alphabet to build the CSRF secret.

See http://stackoverflow.com/a/7233959