Fix a test of clack-middleware-csrf. Don't follow redirects when testing 302 responses.