Disable Csrf by default

CloudFlare fail with AJAX request and Csrf enabled.