Fix csrf
Remove user from tests