Handle case of stale xsrf cookie

This fixes an issue I ran into where the protected data was no longer available. A new cookie will now be generated for this case.