Removing csrf