This should deal with the CSRF token error on BCash's callback.

Users would be asked for login on coming back from BCash.
Logs would show "WARNING: Can't verify CSRF token authenticity" because
we were receiving a post request from an external website that did not
include our CSRF token. Simply ignoring the post and redirecting to a
get action would hopefully fix that.