CSRF Exemption for API methods.