adds some unit tests for model logic
redefines routes, builds out some star functionality, allows embeded CSRF tokens in remote forms