Disable protection against CSRF in HooksController

HTTP POST requests to these URLs don't need this kind of protection and won't
work if it is enabled.