Unprotecting from CSRF for testing