added requires_csrf_token decorator to views