Use the right CSRF token names

Oops, in my previous commit (#90) I used `_csrf` rather than `_token` which is the Laravel 4 Form default value. This one should fix both the test and the code :)

Sorry 'bout that!