Skip CSRF protection for the purpose of this exercise