Remove csrf requirements