Added CSRF check back in, fixed broken tests after js directory reorganization
Added csrf hidden input to login form