bugfix for host//update being checked instead of host/update

Additional:
@csrf_exempt added to all the necessary views