Location routes
Disable csrf