CSRF protection and user checks for answer and comment converting views