Disable CSRF attacks.

This is to show that CSRF protection defaults to disabled on testing environment.
In order to expose POST, PUT/PATCH and DELETE requests, this needs to be removed from other envs.