fix(charts): disable CSRF for chart data endpoint

[dpgaspar]

SUMMARY

CSRF exempts by default the chart data REST API endpoint. This is a POST endpoint that is used like a GET endpoint. We use POST because the amount of options is so big we need a payload.

Also did a small refactor on the way CSRF is initialised, now we can import it and use it's decorator if needed

Related to issue #10354, will help user's leverage the chart data API

ADDITIONAL INFORMATION

• Has associated issue: Calling /api/v1/chart/data returns 400 "The CSRF session token is missing" #10354
• Changes UI
• Requires DB Migration.
• Confirm DB Migration upgrade and downgrade tested.
• Introduces new feature or API
• Removes existing feature or API

[villebro]

LGTM. Got slightly confused by the description of chart data being a GET endpoint. Perhaps rephrase to indicate that it is a POST endpoint that is used like a GET endpoint due to the large payload requirement.

[dpgaspar]

Yes, reread it and it is confusing :) thks