CSRF token expiration

[Myles Metzler]

CSRF token expires after an hour when page is left open for long periods of time. This results in setup & login/out forms failing.

[Myles Metzler]

2.2.0 handles the expired token properly and suggests how to fix it (refresh the page). In a future version this will need to be handled seamlessly.