Added package index view layer test, fixed has_many/belong_to inverse_of relations. Removed CSRF protection. Modified packages controller to match API json to instructions.