httpauth.py: Improve the CSRF token stuff.