…irects.

ensure that / is a simple view that doesn't have side effects that
break the tests.  session-csrf's tests should be independent of the
Django project it's included in.

This fixes an issue with IE 7 and 8 not accepting the cookie if the client's
date is set wrong. Session cookies (cookies that have no set expiry date and
therefore expire at the end of the browser session) are already used by Django
for storing the SESSION_COOKIE (sessionid by default).

This requires moving the common code into process_view so we can tell
if the view has been decorated.

This caused test_anon_token_from_cookie to pass when it shouldn't

The view needs to be decorated with anonymous_csrf before calling
process_view.