CRATEIT-40 Enabled CSRF checks for all controller methods but EPub download.