Refresh CSRF tokens and retry when we have issues

If you reboot a device the CSRF token could change and you need to issue a GET before issuing your POST/PUT/DELETE.

Also, POST/PUT/DELETE can set a new CSRF token which we didn't account for previously.