add tests for new csrf_token functions