remove csrf_exempt decorator from bookmark_add