Use api instead of site defaults.

Removes anti-forgery.