Success on #5 but using csrf_exempt decorator, not super safe, going to use the django docs solution.