remove test that csrf middleware is disabled (since we can't seem to reload middleware between tests)

move definitions from setuo into test method