Adding custom error option.

Adds a custom error response function that can be set in csrf.Options.

It is called when CSRF token validation fails and defaults to a function which replies with a `http.BadRequest` error with message: "Invalid csrf token".