v0.6.0

• Major BC break: session information is now stored in ctx.session instead of
  ctx.state.session.
• Adding features for CSRF token generation and checking: ctx.getCsrf and
  ctx.validateCsrf.
• Typescript target is now es2019 instead of esnext to ensure that older
  Node.js versions are supported.
• Switched to eslint.