Add token check route.

The client app should hit this when it is first initialized to make sure
everything is working okay.
Dont verify csrf token when posting data.

I don't have a way to set it on the client side, and there's no need to
check it on the server end.