Merge pull request #5911 from edx/gprice/login-oauth-csrf-exempt

Make OAuth token login endpoint CSRF exempt

common/djangoapps/student/views.py

@@ -1114,6 +1114,7 @@ def login_user(request, error=""):  # pylint: disable-msg=too-many-statements,un
     })  # TODO: this should be status code 400  # pylint: disable=fixme
 
 
+@csrf_exempt
 @require_POST
 @social_utils.strategy("social:complete")
 def login_oauth_token(request, backend):