Enable PUT and POST forwarding without xsrf protection.

- Protection should be done by the user agent itself