Removing xsrf protection for tests and production
Adding controller tests for / and /retrieve-form-elements routes