Added Test::Mojo::csrf_token and Test::Mojo::session methods

Hi. I've created that functionality for testing secure applications for my own purposes. But may be someone will find it worth for himself.
This is a bad example since `param` is vulnerable to injection attacks if used this way.