SEC-2404: Fix CSRF config tests