Add 'token_per_request' feature
Factor out some common test functions
Update tests to use Test::XSRFBlock::Util