Mark POST_request_promo as exempt from CSRF checks
Add tracking names and hashes.