Bumping to version 0.4.0

- switch to sha256 instead of md5 when calling hash_hmac
- rename csrf_token to req_token_generate
- rename csrf_token_verify to req_token_verify
- update csrf_* tests to req_token_* tests