CSRF should only send on appropriate methods and in this domain

copypasta from the Django website