Update csrf_test.go