mozilla/kuma — pull request #2346 by groovecoder (2014-04-29 20:20:22+00:00)
Title: fix bug 906883 with browserid_form and csrf_exempt

This makes browserid_change_email work the same as browserid_verify,
since _verify_browserid on the assertion is an effective CSRF protection