Bumb to 2.2-SNAPSHOT which fixes CSRF. Various tweaks to get CSRF
passing in tests:

- turned off signing in test conf
- adding nocheck header to all requests