Testing for Cross Site Request Forgery