Remove unused import of random_bytes from csrf
Add a const module and move a couple things there
Allow alternate resource method names to be specified

That is, when mounting a resource, a ``method_name`` can be passed to
specify which method should be dispatched to.
Fix and improve mounting of subresources

Requires passing `app` to `MountedResource`.