add decorator for csrf_exempt
delete @csrf_exempt & add AllowAny Permission
Merge pull request #1 from BOBTommy/develop

Develop