Fix Find another way to isolate CSRF for testing