Move test-app generation into Test::XSRFBlock::App

These could be generated in a tidier way, but at least they're all in one
place now.