feat: update csurf -> csrf-csrf

[Benehiko]

Replaces csurf with csrf-csrf. https://www.npmjs.com/package/csrf-csrf

I have also updated the Ory client to the latest version.

Since this is a change in security related packages concerning CSRF protection on the consent endpoint, could you take a look @hperl?

Related Issue or Design Document

Checklist

• I have read the contributing guidelines and signed the CLA.
• I have referenced an issue containing the design document if my change introduces a new feature.
• I have read the security policy.
• I confirm that this pull request does not address a security vulnerability.
  If this pull request addresses a security vulnerability,
  I confirm that I got approval (please contact security@ory.sh) from the maintainers to push the changes.
• I have added tests that prove my fix is effective or that my feature works.
• I have added the necessary documentation within the code base (if appropriate).

Further comments

[jonas-jonas]

This looks very good, and I might be able to use this lib as well. Looks like it's very versatile. Also, very nice updates to the README.

Have just a few nits.