Disabled forgery protection for testing purposes

Not an idea solution since I might want to have this enabled eventually,
but if I want ot be able to look at my API responsed via POSTMAN then I'll
have to have this disabled