Rescue errors arrising from invalid base64 strings

I noticed that if the CSRF token required by the client is not valid base64 encoding, an `ArgumentError` about invalid base64 is raised.  This PR rescues that exception and returns `false` for the validity check, since the token is obviously not valid.