You can remove `isset($config['csrf_protection']) && `