CSRF_AUTH_TOKEN replaced with csrfp_token

both in js and php lib