Disable extracting CSRF from cookie and get from input hidden