testapp: moved login/csrf session methods into TestApp itself....
testapp: moved login/csrf session methods into TestApp itself.
- this allows easier control over which app is responsible for session handling.
This comes in handy in CE vs EE test where EE get's a custom app.
