Deactivate csrf for testing purpose