return false for invalid base64 csrf tokens.
Merge pull request #21 from square/handle-invalid-csrf-tokens

return false for invalid base64 csrf tokens.