disabled WTF_CSRF_SSL_STRICT because of missing referrer

app/__init__.py

@@ -8,6 +8,7 @@ cp = CSRFProtect()
 def create_app():
     app = Flask(__name__)
     app.config['SECRET_KEY'] = 'SECRET_KEY'
+    app.config['WTF_CSRF_SSL_STRICT'] = False
     app.register_blueprint(index)
     cp.init_app(app)
     return app