when compiling resources, don't commit the transaction (we may be rendering an exception view!) but disable CSRF checks so the auto-commit can proceed without an authenticator