Fix Accept / Reject form display

- add a test with js: true

- note that this page is requested with token_path
and not token_url. Not clear to me how to make
url_for play nicely with poltergeist.