More layout fiddling...

config/packages/framework.yaml

@@ -1,7 +1,7 @@
 # see https://symfony.com/doc/current/reference/configuration/framework.html
 framework:
     secret: '%env(APP_SECRET)%'
-    #csrf_protection: true
+    csrf_protection: true
 
     # Note that the session will be started ONLY if you read or write from it.
     session: true
@@ -12,5 +12,8 @@ framework:
 when@test:
     framework:
         test: true
+        form:
+            csrf_protection:
+                enabled: true
         session:
             storage_factory_id: session.storage.factory.mock_file

config/packages/security.yaml

@@ -19,6 +19,9 @@ security:
                 login_path: app_login
                 check_path: app_login
                 enable_csrf: true
+            logout:
+                path: /logout
+                target: app_login
             lazy: true
             provider: app_user_provider