Adding the _csrf_token to the session after login.

Fix for #150.

Calling form_authenticity_token on login.