Rename csrf app and add tests

Fixes the last checkbox on: https://github.com/kahnjw/mileagebe/issues/6