commented out 'django.middleware.csrf.CsrfViewMiddleware