Remove CSRF check for now

Signed-off-by: Gawain Lynch <gawain.lynch@gmail.com>