Post to casework and check are csrf exempt.