test all .js files in test folder
use cookie modules to parse cookies in csrf test
use hidden csrf field in views
major tests refactoring