Spring security csrf

Not sure what was exactly requested in #137. This one adds the {{ csrf }} object which a CsrfToken added by spring-security csrf routine. This obviously adds spring-security as dependency. Please review and let me know.