Avoid csrf for OAuth signed request from LTI.