Updated to latest CSRFGuard 3.1. Created a TokenGenerator servlet by
moving the token generation code from JavaScriptServlet. This enables
the JavaScript to be debugged as JavaScript (was an issue in Firefox
using Firebug at least). Updated settings in csrfguard.properties.