Remove CSRF protection