Added CSRF exempt on complex search API call