fix: Remove the CSRF.