Disable CSRF protection for simplicity