Use ensure_csrf_cookie in the place of csrf_exempt.
More secure.