Removed dashes from routes, disabled csrf again