Removed csrf verification for the meantime