Removed CSRF protection for nginx