Remove call to now-private method.
Generate CSRF token.