csrf: skip CSRF validation in tests.
release v0.12.3.