Disabled CSRF filter. to API