Added csrf_exempt to expose_service decorator. Function invoke_backend_service_as_proxy now returns an HttpResponse with same headers as backend service