Taking out possibly redundant CSRF protection