Cookbook: Use csrf_exempt when determining format via URL

Without this, anyone who follows this example will get CSRF errors if they're using the default Django CSRF protection and they're not already sending the CSRF token. This brings the behavior in line with the default `wrap_view`.

It took me quite a while to figure out why my wrapped views following the current example weren't behaving, but I'm very glad that cookbook existed.