CRSF token revamp. Hopefully this will solve (or at least help debug) the couple of CSRF validation failures I've seen.