Allow skipping CSRF check.