Disable CSRF; redirect after delete action