created tests for CSRF token provider