Added csrf_exempt decorator to thank_you view (PayPal sends POST request)