Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
I couldn't find a `put_status/2` function and did a `send_resp/3` instead from here and then a `halt`. Is that okay?