Disabled CSRF protection to accept webhooks