Disable CSRF protection on OAuth and LTI