Use `@csrf_exempt` decorator