added csrf token and test expecting to be able to delete bills