CSRF-exempt mongoauth views