post antiForgeryToken along with template request

uses postify to turn JS into proper MVC bindable code and inject the
requestToken.  Downside is knockout has to stringify and then parse
template -- this should be fixed in the next version of knockout
permissions checked by controller attribute
antiForgery token for simple courser assignment
adding in antiForgery token for date update
simple addition of forgery token to question mod
forgery token required for TA change
Merge pull request #13 from ucdavis/antiforgery

Adding AntiForgery token to Setup and Template controllers