Install csrf_token() for all template types.

This installs csrf_token() in the render context so that
it works by default for all template types, not just Jinja2.

Also adds a test for the helper function and bumps the version
number.