Disable json_csrf protection, it just blows up