title: Yesod POST disabling CSRF
body: <p>I did disable session by using</p>
  
  <pre><code>makeSessionBackend _ = return Nothing
  </code></pre>
  
  <p>As stated in Yesod book, but I am still getting CSRF problems while testing my JSON API. How can I disable this feature properly?</p>
  
  <p>I am getting this message when I make the request with <code>curl</code></p>
  
  <pre><code>The `defaultCsrfMiddleware` Middleware added in Foundation.hs adds a CSRF token the request cookies
  </code></pre>
  
  <p>I am not using <code>defaultCsrfMiddleware</code></p>