Scenario: All my site forms protected by csrf - it is ok. But url /special must receive POST request from other site (example, self-signed notification of payment) and there is no csrf available fo...