Django-magic to prevent cross-site request forgery for POST requests