Disable crsf protection for json requests