enable CSRF protection for tests, revert c503501c4787be2ff9300e9abf932de51307069d