remove xsrf logic from autocomplete bundle