Slight modification to CSRF error message to make timeouts less user-unfriendly.