Skipping csrf authentication