don't use csrf_exempt everywhere

fedireads/templates/edit_user.html

@@ -6,7 +6,7 @@
         <form name="avatar" action="/edit_profile/" method="post" enctype="multipart/form-data">
             {% csrf_token %}
             {{ form.as_p }}
-            <button type="submit">Upload</button>
+            <button type="submit">Update profile</button>
         </form>
     </div>
 </div>

fedireads/templates/layout.html

@@ -27,6 +27,7 @@
                 <div id="account">
                     {% if user.is_authenticated %}
                     <form name="logout" action="/logout/" method="post">
+                        {% csrf_token %}
                         Welcome, <a href="/user/{{ request.user.localname }}">{{ request.user.localname }}</a>
                         <input type="submit" value="Log out"></input>
                     </form>

fedireads/templates/login.html

@@ -3,6 +3,7 @@
 <div id="content">
     <div>
         <form name="login" method="post">
+            {% csrf_token %}
             {{ login_form.as_p }}
             <button type="submit">Log in</button>
         </form>

fedireads/templates/register.html

@@ -3,6 +3,7 @@
 <div id="content">
     <div>
         <form name="register" method="post">
+            {% csrf_token %}
             {{ register_form.as_p }}
             <button type="submit">Create account</button>
         </form>