* Allows CSRF cleanup to be turned off for certain strategy types
* Defaults Authenticatable CSRF cleanup
Merge pull request #3023 from jphenow/omniauth-cant-cleanup-csrf

Omniauth can't cleanup CSRF