Add CSRF protection exceptions for stations
Fixes issue where station#update_balance fails #42