Don't set X-CSRF-Token header in every req (it was breaking Shutterbug)