remove forgery protection

to test with curl