Disable json_body on csrf method