Csrf header

Implement csrf abilities in API tests