Removed CSRF protection - not yet ready to be tested

PLAT-1083 #time 10m