A. To exclude a view from CSRF protection
B. To enforce CSRF protection on a view
C. To define URL patterns for CSRF requests
D. To handle user authentication
