Allow CSRF protection middleware. Use default middleware in the example settings

We assumed that the csrf protection middleware would not be installed. This change allows said middleware by effectively ignoring it for all PUT requests.