Skip CSRF token authentication for now

This is inheriently insecure but until csrf token requests are made on the
angular side, it will just confuse the first attempts at interacting with the
API
Tasks controller clean ups