public void testControllerCSRF() throws Exception {
// Send it as an AJAX request but not a task queue request - should be denied.
HttpServletRequest request = createMockRequest(CONTROLLER_PATH, false, true);
HttpServletResponse response = createMock(HttpServletResponse.class);
response.sendError(403, "Received unexpected non-task queue request.");
replay(request, response);
servlet.doPost(request, response);
verify(request, response);
}