Add functional tests

Closes #17
We didn't do CSRF for submitting Rules or Board Announcements either, so I was just following the trend.