Turn off CSRF checking if the testing flag is set