MIDDLEWARE_CLASSES has CSRF in it by default. Remove