allow strings ot be passed to .assertCSRF()
2.1.0