diff --git a/archivebox/api/auth.py b/archivebox/api/auth.py
index 1af564e2..7d88b928 100644
--- a/archivebox/api/auth.py
+++ b/archivebox/api/auth.py
@@ -105,6 +105,6 @@ API_AUTH_METHODS = [
     HeaderTokenAuth(),
     BearerTokenAuth(),
     QueryParamTokenAuth(), 
-    django_auth_superuser,
+    # django_auth_superuser,       # django admin cookie auth, not secure to use with csrf=False
     UsernameAndPasswordAuth(),
 ]