Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
We need to maintain the `conn` state here. The `conn` state is lost b/w the `send_resp` and `halt`