Fix readme
Move csrf exempt decoration in urls.py