add csrf protection

app/routes/mod.py

@@ -1,5 +1,5 @@
 from flask import Blueprint, abort, redirect, url_for, request, render_template
-from ..auth import is_logged_in, get_active_user
+from ..auth import is_logged_in, get_active_user, csrf_verified
 from ..models import Topics, Threads
 bp = Blueprint('mod', __name__, url_prefix='/mod/')
 
@@ -81,13 +81,16 @@ def sticky_thread(thread_id):
     return redirect(url_for('threads.thread', slug=thread.slug))
 
 @bp.post('/users/<int:user_id>/make-guest/')
+@csrf_verified
 def make_user_guest(user_id):
     return 'stub'
 
 @bp.post('/users/<int:user_id>/make-user/')
+@csrf_verified
 def make_user_regular(user_id):
     return 'stub'
 
 @bp.post('/users/<int:user_id>/make-mod/')
+@csrf_verified
 def make_user_mod(user_id):
     return 'stub'