Add header submission test to test_csrf_checking