Add sandstorm automatic login
Remove csrf check
Remove ajax requirement from routes