Remove CSRF from client

no issue
- removed occurrences of csrf from client
Merge pull request #3170 from sebgie/csrf-remove

Remove CSRF from client