Adding a functional test for anti forgery.

#333 
You could get away using the default overload for UseMvc

`app.UseMvc();`