CSRF protection for Django without cookies.