Make bikes API CSRF exempt