test enhancements

- added some tests for coupon .bak access
- waiting longer after cleanup during xss4 test to prevent(?) 3rd popup