Adding protect_from_forgery to avoid CSFR token issue