Safari csrf problems (setting cookie _csrf_token)

[afterdesign]

_csrf_token cookie is not set properly in safari browser when path is bytes not str.

Function generate_csrf_token is getting path configuration from get_conf:

csrf_path = conf.get('csrf.path', ROOT).encode(ENCODING)

When I'm converting bytes to str in generate_csrf_token cookie is set correctly.

response.set_cookie(token_name, token, path=path.decode(),
                        secret=secret, max_age=expires)