Allow passing of token generation function and error function as params
If on-potential-csrf-attack does not return a response fall through to handler
Accept tokens in headers
Bump version number
Add utility function to add meta tags containg csrf header info
Add x- prefix to header name
Change namespace to com.bwhmather