update test for when to send the csrf_token based on Django's latest documentation

https://docs.djangoproject.com/en/dev/ref/csrf/
include Django messaging framwork's messages in the user head output