Tried to get csrf to work. Thinking about serving frontend using a django app rather than angularjs