Add garbage collection to CSRF token generator/validator