Do not prevent CSRF attacks