Added CSRF exemption to /member/valid_user/ .