Changed validation rules with string length to use str class which handles multibyte characters

Signed-off-by: Derek Myers <arcticpro@gmail.com>
Change logic on CSRF token generate.
Backwards compatibility fixes
Merge pull request #1344 from indigofeather/1.6/develop

Fixed Event_Instance::unregister()
change config security.csrf_token_salt default value.
I divided the function of token generating, and change logic to use sha512.
Inactive patterns now have not {uri}. Added first/last inactive generation. Empty by default for bc
remove unused property $default
Merge pull request #1343 from takyam-git/feature/classes/security/set_token/secure_generate_token

Change logic on CSRF token generate.
limit crsf autoload to specified HTTP methods; documented csrf config
Security::generate_token() should be public
Merge pull request #1345 from lukearmstrong/patch-1

Backwards compatibility fixes
Merge pull request #1348 from SCIF/1.6/develop

Inactive patterns now have not {uri}. Added first/last inactive generation
fixed incorrect number of generated links
Merge pull request #1337 from dmyers/1.6/develop

Changed validation rules with string length to use str class
Fixed Event_Instance::unregister() bug