Don't allow double . in emails
Remove CSRF protection, not needed for API
API requests for viewing and creating a user