How to disable game 2.6 CSRFFilter

I was recently ported to 2.6 and im getting 403 responses when calling my api from postman which has something to do with filters.

first when i start my service i got this error

[warn] 13: 40: 58.654 - play.filters.hosts.AllowedHostsFilter - Host not allowed: 14.1.90.128:9000

so I added to application.conf:

play.filters.hosts {
  allowed = ["."]
}

      

        
        
        
      

    

and it fixed the problem, but I was never forced to do this ...

not im for this error trying to go to the action api method:

[warn] 20: 04: 23.230 - play.filters.CSRF - [CSRF] Failed to validate because no tokens found in headers

wierdly enough, the get method works and the message gives the above error ...

I know it has something to do with the safety of rest, but never made me think about it, how do I do it? I know filters