diff --git a/mmg/settings.py b/mmg/settings.py
index ec06e6f..0631175 100644
--- a/mmg/settings.py
+++ b/mmg/settings.py
@@ -89,7 +89,6 @@ TEMPLATE_LOADERS = (
 MIDDLEWARE_CLASSES = (
     'django.middleware.common.CommonMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
-    'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     # Uncomment the next line for simple clickjacking protection:
diff --git a/static/django-csrf.js b/static/django-csrf.js
deleted file mode 100644
index 4f567b6..0000000
--- a/static/django-csrf.js
+++ /dev/null
@@ -1,44 +0,0 @@
-// using jQuery
-function getCookie(name) {
-    var cookieValue = null;
-    if (document.cookie && document.cookie != '') {
-        var cookies = document.cookie.split(';');
-        for (var i = 0; i < cookies.length; i++) {
-            var cookie = jQuery.trim(cookies[i]);
-            // Does this cookie string begin with the name we want?
-            if (cookie.substring(0, name.length + 1) == (name + '=')) {
-                cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
-                break;
-            }
-        }
-    }
-    return cookieValue;
-}
-var csrftoken = getCookie('csrftoken');
-function csrfSafeMethod(method) {
-    // these HTTP methods do not require CSRF protection
-    return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
-}
-function sameOrigin(url) {
-    // test that a given url is a same-origin URL
-    // url could be relative or scheme relative or absolute
-    var host = document.location.host; // host + port
-    var protocol = document.location.protocol;
-    var sr_origin = '//' + host;
-    var origin = protocol + sr_origin;
-    // Allow absolute or scheme relative URLs to same origin
-    return (url == origin || url.slice(0, origin.length + 1) == origin + '/') ||
-        (url == sr_origin || url.slice(0, sr_origin.length + 1) == sr_origin + '/') ||
-        // or any other URL that isn't scheme relative or absolute i.e relative.
-        !(/^(\/\/|http:|https:).*/.test(url));
-}
-$.ajaxSetup({
-    beforeSend: function(xhr, settings) {
-        if (!csrfSafeMethod(settings.type) && sameOrigin(settings.url)) {
-            // Send the token to same-origin, relative URLs only.
-            // Send the token only if the method warrants CSRF protection
-            // Using the CSRFToken value acquired earlier
-            xhr.setRequestHeader("X-CSRFToken", csrftoken);
-        }
-    }
-});
diff --git a/templates/index.html b/templates/index.html
index 1367d1d..bee5498 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -11,14 +11,13 @@
             <span class="number" id="operation">+</span>
             <span class="number" id="second">0</span>
             <div>
-                <input id="answer" type="number" size="2" class="number" autofocus />
+                <input id="answer" type="tel" size="2" class="number" autofocus />
             </div>
         </section>
         <footer>
             score: <span id="score"></span>
         </footer>
         <script src="/static/jquery-2.0.0.min.js"></script>
-        <script src="/static/django-csrf.js"></script>
         <script src="/static/math.js"></script>
     </body>
 </html>