Added tough-cookie to dev dependencies.
Implemented cookie parsing for csrf test (not working yet)
Prepared tests for unvalidatedRedirect.
Merge remote-tracking branch 'origin/master'
Added unvalidated redirects to route.