closes body on prevented JsonCsrf