Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
You should also specify the default error message here, instead of doing it when raising. :)