added csrf test to test suite