Remove session\cookie from CSRF prevention mechanism