Tidy up imports and move FakeHttpRequest class.

We only use it in the CSP tests, so it's now there.