Remove formtoken from controllers