Revert "support csrf validation". It is unnecessary for AJAX queries

This reverts commit 99030db43c2b56326d4c7af646947eb7126ee5a2.