Further testing on csrf