Improved CSRF functions

A callback function can be set to manipulate the results or behavior of
verifyToken() function