Using ensure_csrf_cookie decorator to explicitly pass back csrf_token since am not doing renders