single sign out send post without csrf token