Merge pull request #604 from leider/master

a day's work
In order to test middleware in integration, we need to be able to inject it into the test app.
Fixing security leak that allowed Clickjacking (thx to @redshark for the advice)
Test cleanup
Now we can add multiple middlewares to the test app.
Fixing security leak that allowed Cross-Site Request Forgery (thx to @redshark for the advice)
Merge pull request #605 from NicoleRauch/master

Zwei Sicherheitslücken geschlossen