Inject CsrfToken as a dependency

[ericfortmeyer]

The token is already injected into the filter strategy. The token storage and response filter are, therefore, using different tokens causing false negatives.

[ericfortmeyer]

Using a factory instead will be easier on consumers of the library. The factory method will require the token.