Removed CSRF

* Need to do `csrf` in another way