Log referrer on CSRF problem

There's a chance that this could help debug CSRF problems when they
occur.
Doh, we're not in Sinatra's context here
Add tests for the CSRF middleware
Merge pull request #100 from heroku/brandur-referrer

Log referrer on CSRF problem