Remove CSRF from client

no issue
- removed occurrences of csrf from client