Turned off csrf protection for the pebble function