[TASK] Remove CSRF protection from controller action that doesn't need
anymore