Remove CSRF for plants controller