Removed CSRFToken requirement for the API