Remove anonymous CSRF protection