Add CSRF protection to AuraForm with Aura.Session

Add Aura.Session and CSRF protection to AuraForm.

This is my first attempt to add CSRF protection. If there is something wrong, please tell me.