No need to set nocsrf from my testing