Adding a functional test for anti forgery.

#333 
This controller isn't used in the test.