Removed async version of csrfToken(). Used a fast non-blocking PRNG for the salt generation (which removes the need for async).
Merge pull request #883 from pesho/master

Remove async version of csrfToken() & use a fast non-blocking PRNG