Account for 'tor.real' hack in test

Our tests expect tor to be running with the process name we ran, but this
isn't necessarily the case. On OSX there's a hack so it runs as 'tor.real' so
gotta check for that too. Caught thanks to corcra on...

  https://trac.torproject.org/projects/tor/ticket/15449