function createToken(salt, secret) {
  return salt + crypto
    .createHash('sha1')
    .update(salt + secret)
    .digest('base64');
}
Creates a CSRF token from a given salt and secret.

@param {String} salt (should be 10 characters)
@param {String} secret
@return {String}
@api private