Remove crsf from requests