Search GET request doesn't require CSRF protection.