Detect and clear invalid token if token check fails

Fixes #2367
Merge pull request #2367 from jroper/2367-csrf-clear-invalid-token

CSRF token disaster when upgrading Play 2.1.5 -> 2.2.2-RC2