CSRF protection in Phoenix with Sec-Fetch-Site

My changes to the default Phoenix boilerplate