Added Test::Mojo::csrf_token and Test::Mojo::session methods

Hi. I've created that functionality for testing secure applications for my own purposes. But may be someone will find it worth for himself.
Since your descriptions don't mention the significance of the last reponse, ignoring `nb_url` here might be problematic.