csrf: added method to get csrf timeout + simple json view to get current token