Test cookie/token behaviour / refactor tests
Remove DB breakpoint
Add ability to pass message/reason to xsrf_detected()
Start looking for xsrf_token cookie in m'ware