https://camera-optical-zoom.blogspot.com/2022/11/csrf-exempt-failure-apiview-csrf-django.html