getting a csrf token requires an app id
test base provides app to get csrf token
test csrf