No bug - Allow page to work without CSRF token