Tested home and security controllers. Changed auth csrf token generation to occur when displaying the login dialog, not when loading the home page.