Properly place CSRF decorator