Ignorign CSRF for updates and falling back to redirect for HTML responds