How to apply (CSRF) Middleware to a specific route area is explained at this link: https://book.cakephp.org/4/en/controllers/middleware.html#cross-site-request-forgery-csrf-midd