Removing csrf_exempt which was only for testing purposes