Testing for CSRF (OWASP-SM-005)