Ability to disable the CSRF token control.