CSRF crumb generation and validation for hapi