Remove CSRF middleware