skip csrf token verification in artifacts#publish