Add test for reuse CSRF token

[ymatsukawa]

Added test explicit verification for reuse CSRF token logic:

• Strictly validates token is reused when cookie exists
• Confirms new token is generated when no cookie provided

This reinforces detailed test for CSRF token behavior.