Replace testing mode with WTF_CSRF_ENABLED in csrf before request hook. #85