Added option of verifying csrf token through custom http header

Changes a couple of things in CSRF:

* Allows to send csrf tokens as http header
* Allows for customisation of csrf http header
* Added test cases for both new functionalities