restored test_csrf_verify_valid()

Change to setting the token in the post was unnecessary.