Remove disabling CSRF in tests