csrf exemption for all pdf views