xblock-external-ui: Add a unit test for CorsCSRFMiddleware