remove test that csrf middleware is disabled (since we can't seem to reload middleware between tests) move definitions from setuo into test method
