Disable CSRF check for whitelisted paths