Map controller to integration tests.
Recycle `request` everytime `process` is called.
No longer accepts `flash` as a parameters.

In order to be consistent with Integration tests, I don't think we should
set the flash manually but rather do it within the controller.
Remove the need to predefine a set of allowed headers.