Disable csrf protection for the json urls