Mark POST_request_promo as exempt from CSRF checks