fix test_sts_on test when SECURE_HSTS_INCLUDE_SUBDOMAINS is set
Pass a real request object in test_frame_deny_exempt so that test doesnt fail when SECURE_HSTS_SECONDS is set