Backported fix for csrf disabled.

please revert the indentation change