fix to test_disallowed_in_request to be less explicit (forgot set formatting differs between Python versions)