CsrfProtection: token is expired after regenerateId() (i.e. after logout) [Closes #36]