disable inclusion of csrfguard.js