Handle case of stale xsrf cookie

This fixes an issue I ran into where the protected data was no longer available. A new cookie will now be generated for this case.

<!---
@huboard:{"order":481.75,"milestone_order":488,"custom_state":""}
-->