in 3.6.x functions_misc.php code is little bit different, there is no 'sign_client_string' function, so the correct line to search is
Code:
return '<input type="hidden" name="postvars"
...