Adding custom error option.

Adds a custom error response function to be set in csrf.Options.
It is called when CSRF token validation fails and defaults to a function which replies with a `http.BadRequest` error with message: "Invalid csrf token".