move fr translation to wiki
fix csrf when strategy is :null_session or :reset_session, fixes #457