Exempt the AuthMethod trample view from CSRF protection.

Let CSRF protection be handled by the forms.
Do not allow redirects to equivalent routes for AuthMethod views

302 Redirects allow the request method to change from POST to GET.
Use AuthMethod.safe_name more in login.html
Fix an occurrence of the old 'safe_name' logic in auth.bravecore
Disable all CSRF protection while testing