This post tests CSRF deletion