Implemented RoomServer and added csrf_exempt to AddUser