Removed bodyState from Status service
Extracted Csrf logic into concern #3
Added Spree::UserSessionsController #3