https://keroseneheaterreview.blogspot.com/2024/05/csrf-exempt-failure-apiview-csrf-django.html