remove test that csrf middleware is disabled (since we can't seem to reload middleware between tests)