Removed CSRF authentication for the API