Clojurians Log v2

what could i be doing wrong? i need a url endpoint i can post to from a different website. I made a separate route:

(defroutes service-routes
(POST "/thirdpartyservice" [query] (thirdpartyservice query)
        (redirect "<https://thirdpartyservice.com>"))
)

then i think i made service-routes not do csrf:

(def app-routes
  (routes
   (-> #'home-routes
        (friend/authenticate conus.middleware/auth-opts)
        (wrap-routes middleware/wrap-csrf)
        (wrap-routes middleware/wrap-formats))
   (-> #'service-routes
       (wrap-routes middleware/wrap-formats))
    (route/not-found
      (:body
        (error-page {:status 404
                     :title "page not found"})))))

but when i post to http://website.com/thirdpartyservice, i get “invalid anti-forgery token”