Closed #4 fixed CSRF issue

Ended up using a hidden form and passing CSRF token along.  Also
reworked RecordAnswer to be a class-based view, and have login required.