Thanks Seth Gottlieb for help with the documentation and
Carl Meyer and Joshua Kehn for reviews.

Added the CSRF_TRUSTED_ORIGINS setting which contains a list of other
domains that are included during the CSRF Referer header verification
for secure (HTTPS) requests.

Only compute the CSRF_COOKIE when it is actually used. This is a
significant speedup for clients not using cookies.

Changed result of the “test_token_node_no_csrf_cookie” test:  It gets
a valid CSRF token now which seems like the correct behavior.

Changed auth_tests.test_views.LoginTest.test_login_csrf_rotate to
use get_token() to trigger CSRF cookie inclusion instead of changing
request.META["CSRF_COOKIE_USED"] directly.

Thanks Markus Holtermann for spotting this.

Thanks codeitloadit for the report, living180 for investigations
and Tim Graham for the review.

Thanks Walter Doekes.

Thanks Paul McMillan for the review.

Added comments in the three empty models.py files that are still needed.

Adjusted the test runner to add applications corresponding to test
labels to INSTALLED_APPS even when they don't have a models module.

Signed-off-by: Jason Myers <jason@jasonamyers.com>

Thanks to edevil for the report and saz for the patch.