Fix the permissions for the build status tests. Fix a problem with logging the csrf token information when the user is anonymous.

endpoints/api.py

@@ -50,9 +50,7 @@ def csrf_protect():
       logger.error(msg, token, found_token)
 
     if not token:
-      req_user = current_user.db_user().username if current_user else None
-      logger.warning('No CSRF token in session for current user: %s' %
-                     req_user)
+      logger.warning('No CSRF token in session.')
 
 
 def request_error(exception=None, **kwargs):