Test to check csrf secret is not changed between request when using cookie session