Rotate the frontend CSRF token on logging and logging out