Removing CSRF check on JSON API calls.