CSRF is handle in all request by default now. No reason to add duplicate code.

Signed-off-by: crynobone <crynobone@gmail.com>