set certificate validity to 5 minutes, make it configurable, and test certification endpoint.  issue #11
add license and description of what tests/csrf.js tests