Csrf protection plug

Couldn't get the last 2 tests to pass. How to persist token in the session in the tests?
Let's call this `call/3` and `call_with_token/3`.