Pass a real request object in test_frame_deny_exempt so that test doesnt...

... fail when SECURE_HSTS_SECONDS is set