Added *CSRFHandler.ExemptFunc, for matching on more complex rules