bypass csrf on commandline