abilian: generate csrf token