test cleanup, add testing of csrf and testing of authentication throttling