Disable sessions and CSRF protection