Purged CSRF module, use the mtj.flask.acl version.