Why use a strong random number generator in one place, but not another? I know salts have no cryptographic security requirement, but collisions are less likely if you use one.

Removed unnecessary PHPDoc property (https://github.com/yiisoft/yii2/commit/ce04134db24d3bcdc0388f5b7832dd1dbb1945ef)

fixes #2370

Changed csrf-var to csrf-param due to meta validation error. The validation error as mentioned in the issue https://github.com/yiisoft/yii2/issues/2363. It is fixed in this pull request.

Fixes #2054: Added support for using custom application configuration with the console command runner