Added csrf exempt to variants list view.