Django 1.1's csrf protection appears to be handled in the middleware component.