Late night mistake (forgot about a feature)

lib/utility.js

@@ -68,15 +68,19 @@ function auth (obj, config) {
 		passportInit, passportSession;
 
 	function csrfWrapper (req, res, next) {
-		luscaCsrf(req, res, err => {
-			const key = req.server.config.security.key;
+		if (req.unprotect) {
+			next();
+		} else {
+			luscaCsrf(req, res, err => {
+				const key = req.server.config.security.key;
 
-			if (err === void 0 && req.csrf && key in res.locals) {
-				res.header(req.server.config.security.key, res.locals[key]);
-			}
+				if (err === void 0 && req.csrf && key in res.locals) {
+					res.header(req.server.config.security.key, res.locals[key]);
+				}
 
-			next(err);
-		});
+				next(err);
+			});
+		}
 	}
 
 	function redirect (req, res) {

package.json

@@ -1,7 +1,7 @@
 {
   "name": "tenso",
   "description": "Tenso is an HTTP REST API framework",
-  "version": "16.2.3",
+  "version": "16.2.4",
   "homepage": "https://github.com/avoidwork/tenso",
   "author": "Jason Mulligan <[email protected]>",
   "repository": {