Remove csrf disable again