added @csrf_protect decorator to TopicView, closed #128