Bumped minimum Rack version.

In Rack releases before 1.1.0, request's `#params` method
works in a slightly different way, so Rack::Csrf doesn't
operate correctly. Moreover, Rack::Lint in Rack 0.9.*
assumes strings respond to `#each` and this is not true
anymore.