Remove CSRF for mobile