disable csrf and overload controller to deal with datatypes