ditch unused angular-resource dependency
progress on csrf protection