Disable CSRF protection. Authentication handler to return json response after successfull login