Add csrf_exempt to tracking view [MJ-480]