Fix missing CSRF exemption on viewsets
Merge pull request #1887 from pipermerriam/piper/decorate_as_view_response_from_viewsets

Fix missing CSRF exemption on viewsets