Removed CSRF protection from receipt

- Removed CSRF protection from receipt since DIBS doesn't have the CSRF token
  to send back when posting to receipt.