Reworked the CSRF protection algorithim... just reuses the same cookie now, no sense in generating a new one upon every request if it expires in 10 minutes