tests for secure csrf part
Fix referer to referrer. remove same origin scheme
more test cases.