Check for CSRF only on integrated envs