Disable CSRF check in test controllers.

This is a temporary measure so we're able to use the admin interface
in these while a showstopping bug gets fixed.