Resetting csrf decorators for now, adding item history api