Don't require the configuration of xsrf token if no xsrf services