Cleaned up login page logic a bit more
Fixed up CSRF tokens so rollover minutes/hours are now checked and valid
Removed unused config setting
Merge pull request #1551 from xisi/csrf-improvements

[FIXES] CSRF tokens & login cleanup