title: Cakephp 3.5.6 disable CSRF Middleware for controller
body: <p>I'm trying to disable the CSRF check for a single controller (API), but I'm unable to find how I'm able to achieve this.</p>
  
  <p>The pre 3.5.0 CSRF Component had the ability to be disabled on certain request using:</p>
  
  <pre><code>$this-&gt;eventManager()-&gt;off($this-&gt;Csrf);
  </code></pre>