csrf_exclude_uris not work

The URIs should follow the pattern of controller/method and should not begin with a slash. So assuming the controller is assistant_dashboard and the method is upload the setting should be

$config['csrf_exclude_uris'] = array('assistant_dashboard/upload');