Removed csrf token protection