Fix test for CSRF on userinfo

Merge request reports