removing CSRF code