Cookies are no longer serialized

Based on update to library 09e859a13e we no longer serialize cookies, so the decrypter no longer needs to apply a serialization layer

modules/backend/widgets/Lists.php

@@ -1172,6 +1172,7 @@ class Lists extends WidgetBase
 
     /**
      * Process as text, escape the value
+     * @return string
      */
     protected function evalTextTypeValue($record, $column, $value)
     {
@@ -1188,6 +1189,7 @@ class Lists extends WidgetBase
 
     /**
      * Process as number, proxy to text
+     * @return string
      */
     protected function evalNumberTypeValue($record, $column, $value)
     {

modules/cms/classes/Controller.php

@@ -1657,7 +1657,7 @@ class Controller
         $token = Request::input('_token') ?: Request::header('X-CSRF-TOKEN');
 
         if (!$token && $header = Request::header('X-XSRF-TOKEN')) {
-            $token = Crypt::decrypt($header);
+            $token = Crypt::decrypt($header, false);
         }
 
         if (!strlen($token) || !strlen(Session::token())) {