Add support for declaring a method as exempt from CSRF checking.

Done as part of the auth blueprint. Just add csrf_exempt=True to the call to
@blueprint.route().