Allow anti-forgery :error-handler to set flash

closes #7
Merge pull request #8 from trptcolin/anti-forgery-flash-ordering

Allow anti-forgery :error-handler to set flash