Custom error option.

Adds a custom error response function that can be set in csrf.Options.
It's called when CSRF token validation fails and defaults to a function which replies with a `http.Error` with status: `http.BadRequest` and message: `"Invalid csrf token."`.