if xsrf cookie fails to decode, issue new xsrf cookie