Removed CSRF protection (will added it later on controller level)