a class for making and validating CSRF tokens