django views: re-enable cross site request protection for improved security