Disabled CSRF protection, updated app