Adding a functional test for anti forgery.

#333 
If these tests are the only ones for AntiForgery (like i am not sure if we have security related tests elsewhere), then it would be nice to have the end to end flow too...like you can try simulating a forgery scenario where you supply the request verification cookies, but your input body does not have the hidden form field related to request verification token...