Fix logic of csrf_generate_secret()
Fix logic of csrf_generate_secret()

Parameter $len wasn't being used at all. This commit uses it to determine the length of the random data to be hashed.

ezyang/csrf-magic,ezyang/csrf-magic