Remove CSRF protection

Cross-site request forgery is not a concern for Kochiku.
Merge pull request #111 from square/rob/remove-csrf

Remove CSRF protection