s3 swat: Add time component to XSRF token