Checking CSRF with null_session. Not raising an excpetion of CSRF token not present as we are using APIs