Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
In latest Plug you don't need to implement Plug.Exception, just add a field called `plug_status: 403`.