Disable csrf token check in /webhook