test all .js files in test folder
use cookie module to parse cookies in csrf test
fix custom routes
use hidden input field for csrf token in view
major tests refactoring