added a form extension to disable CSRF validation