Removed CSRF_ENABLED config flag. Replaced it with TESTING.