TryGhost/Ghost — pull request #2975 by jaswilli (2014-06-16 20:20:32+00:00)
Title: Fix csrfSecret handling

Closes #2974
-use req.session.csrfSecret instead of _csrfSecret.
-clear username and password properties from the signin controller.