disable csrf, #180

the csrf is still working...i try to disable all things concerning csrf and see if it's ok. if i do something stupid don't blame me :-(