Add a test for posting a submission as the logged-in user
Add a view to access session key
Update the session view to return the csrf token as well
Remove CSRF token from session key view, as it's not necessary