Improving CSRF keys