[server]
enableXsrfProtection = false