Remove the CSRF verification from purchase API

DESC:
[Change]
1. Remove the CSRF verification from purchase API
To allow native apps to call the "purchase" API, we need to do it.