Major csrf overhaul

changed the way tests detect logged in user on cookies
add pyramid mako to requirements
rise 401 Unauthorized on failed csrf check
update changelog
docs update
Merge pull request #12 from fizyk/csrf

Major csrf overhaul