rename csrf_token to sg_csrf

Created by: nicksnyder

csrf_token is not a sufficiently unique name when running on localhost, and appears to cause issues for a non-zero number of developers.

fixes https://github.com/sourcegraph/sourcegraph/issues/65