unit test for csrf token class