WIP: CSRF is not longer used with HMAC

 * Included a helper function for simulating openID login during tests
 * Only the API tests are broken because a proper OpenQA::Client module is
   needed