Revert disable_csrf_role