fix "fix "caddy-frontend/test: Prove that disabled-cookie-list does not work""

curl invocation was incorrect, and was working only in some conditions by
chance, so fix it fully. Now the test fails in all conditions correctly,
including sanity assertion.