Block XSRF Attacks with minimal changes to your app

Changes for 0.0.18 - 2023-07-13T10:16:20+01:00

• when invoking the `blocked` callback/app, log as `info` instead of `error` (@pangyre) (#27)