starting a showcase of ajax/sosp/cors/csrf in django