v0.6.0

• Major BC break: session information is now stored in ctx.session instead of
  ctx.state.session.
• Adding features for CSRF token generation and checking: ctx.getCsrf and
  ctx.validateCsrf.
• Typescript target is now es2019 instead of esnext to ensure that older
  Node.js versions are supported.
• Switched to eslint.

v0.5.0

• Changed the default setting for SameSite to Lax.

v0.4.2

• Allow installation on Curveball 0.10.

v0.4.1

• Allow 'sameSite' to be set to cookieOptions.

v0.4.0

• Allow cookieOptions to be overridden.
• Curveball is now a peerDependency

v0.3.3

• Update to Curveball 0.9 API.

v0.3.2

• Stricter typescript errors.

v0.3.1

• Update to latest dependencies.

v0.3.0

• Updated to latest Curveball API.

v0.2.0

• Expire sessions.
• Add garbage collector to MemoryStore.
• BC break: Now uses ctx.state.session and ctx.state.sessionId instead of
  ctx.state.session.data and ctx.state.session.id.