Remove CSRF stuff. Using tokens now.