Removed CSRF security for API sign up.