Tried to disable CSRF