remove duplicate js
remove old testacular file2
add csrf exemptions to notes api