Cross Site Request Forgery protection switched off.