The csrf field is now based upon a random array of bytes instead of an Integer.
This should be more secure.
Authored by: keess 2017-04-19
Parent: [r2988]
Child: [r2990]
