change get config behavior of csrf
remove default value for `WTF_CSRF_TIME_LIMIT`
Merge pull request #106 from fanzeyi/master

Change the behavior of getting config in csrf