CSRF crumb generation for hapi