disable the check for _csrf_used because it's causing a "WARNING: Forbidden (CSRF token missing or incorrect.)" whenever we link to our site from a url in another tab.