disabled AngularAntiForgery check as it was interfering with backend logins