Using NODE_ENV for whitlisting csrf for tests