Removed CSRF middleware