Disable CSRF protection for now

We will leave it in when we talk about form helpers.