CSRF token validity time?

This one seems to be an issue.