Remove length requirement from v1 XSRF tokens