Disable CSRF protection for the API
Disable CSRF protection for the API

By default, all routes will try to verify POST requests via CSRF protection before processing them. For an API like this, where we don't rely on login to authenticate requests, we need to disable it explicitly. Otherwise, all requests just return the default 401 'logged out' message.

WikiEducationFoundation/WikiEduDashboard,WikiEducationFoundation/WikiEduDashboard,WikiEducationFoundation/WikiEduDashboard,WikiEducationFoundation/WikiEduDashboard,WikiEducationFoundation/WikiEduDashboard