fixed one of the test cases - using the csrf cookies now, and changed the views.py to include a testing mode where we dont need admin approval for new users