framework:
    csrf_protection: false
    form:
        csrf_protection: true
    http_method_override: false
