Change protect_from_forgery default