When sending the form via jQuery File Upload we need to add the frontend
to the whitelist for CSRF protection because the HTTP_ORIGIN of the
request from the frontend is different from the backend. If we don't add
it to the whitelist of Rack::Protection::HttpOrigin that middleware will
block the request.