disable CSRF middleware in settings

We had some errors where the CSRF middleware could not find
/dev/urandom which brought the site down.  We don't have user
accounts on this site and don't have any views which use unsafe
methods like POST,DELETE,etc, so CSRF doesn't seem necessary.