bug 1025334: don't pass on csrf token header
Merge pull request #2 from errietta/1025334-2

bug 1025334: don't pass on csrf token header