Fixes #2819 - masks CSRF Tokens to prevent BREACH attacks

This is a backport of the BREACH fix made https://github.com/yiisoft/yii2/issues/1634