Remove CSRF protection on image submission