Regenerate CSRF tokens on log-in log-out
Add specs for devise login