reduce age of csrf cookie

[bhemmer]

to 2 weeks, see https://docs.djangoproject.com/en/3.2/ref/settings/#csrf-cookie-age