Disable CSRF in test env only :)