add csrf_exempt to csp_report view