Adding csrf test