fix sns endpoint with csrf_exempt