disable csrf on scale creation