DJG200

Django middleware is missing CsrfViewMiddleware, which blocks cross-site request forgery

Fixes

Add 'django.middleware.csrf.CsrfViewMiddleware' to MIDDLEWARE in Django settings