Bug in csrf token removal. request.POST is an immutable string.