Allow POST from all Django versions
Update docs to instruct disabling of CSRF middleware

Having this middleware enabled breaks API functionality.