- remove CSRF middleware
- change Token
- change ip for client test