Remove CSRF from demo, disable data cache