remove csrf for weixin query