Removed erroneous reference to csrf protection