implemented interface for CSRF token storage classes
added optional scope to limit where the token can be used (eg.: only for signup, login, etc.)
integrated CSRF protection functionality in page class
removed duplicate functionality, error/messages are handled in page class