[WIP] Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
This should not be an integration test through the router! Here is an example from Plug how you can test a plug directly through Plug: https://github.com/elixir-lang/plug/blob/master/test/plug/session_test.exs