Conditional CSRF Exempt decorator had a bug