This makes it easy to skip CSRF verification for things like web hooks and such from GitHub / Stripe.
