made CSRF copesetic for API tests
create through curl post json works!
wrote some API tests'
API basic security enabled