Remove all reference to the Web::HTTPSession plugin in tests.

This allows to test the Web::CSRFDefender plugin again.