Remove unnecessary CSRF protection