Removing CSRF protection (don't tell anyone)