Transfer tests ozten

Couple tweaks for CSRF, Cookie, and POST