Fix permission issue with two Django views.
Fix permission issue with two Django views.

The views handle read-only HTTP POST requests, and thus should be (and
now are) exempt from Django's CSRF protection.
HaroldMills/Vesper,HaroldMills/Vesper,HaroldMills/Vesper,HaroldMills/Vesper,HaroldMills/Vesper