Disable sessions
Remove CSRF protection
Merge branch 'disable_sessions'