add report_csrf_failure, enable custom reports

ref #1566

To render custom error add to your app

```
enable :protect_from_csrf
enable :report_csrf_failure
error 403 do
  render 'base/error'
end
```