CSRF token must be sent in header
Removed formidable dependency