Testing conditional independence with data missing at random