Make CSRF protection consistent
Make CSRF protection consistent

FeedbacksController overrode the protect_from_forgery settings inherited
from ApplicationController. As a result, forged requests to
FeedbackController returned 302 Found, but they returned 422
Unprocessable Entity everywhere else.

ministryofjustice/prison-visits,ministryofjustice/prison-visits,ministryofjustice/prison-visits