feat: Remove todos (#905)

## Describe your changes

Fixes: #

## Checklist before requesting review

- [x] Feature/fix PRs should add one atomic (as small as possible)
feature or fix.
- [x] The code compiles and all the tests pass.

register/api/__init__.py

@@ -1,8 +1,12 @@
+import os
+
 from django.contrib.auth.models import User
 from django.utils import timezone
 
 from fair.models import Fair
 
+is_dev = os.environ["DJANGO_SETTINGS_MODULE"] == "ais.local.settings"
+
 
 def get_fair():
     return Fair.objects.filter(year=timezone.now().year).first()
@@ -11,8 +15,9 @@ def get_fair():
 def get_user(request):
     user = request.user
     if not user.is_authenticated:
-        # Todo: remove for prod
-        user = User.objects.filter(email="[email protected]").first()
-        # return None
+        if is_dev:
+            user = User.objects.filter(email="[email protected]").first()
+        else:
+            return None
 
     return user

register/api/registration/__init__.py

@@ -1,5 +1,3 @@
-from django.views.decorators.csrf import csrf_exempt
-
 from companies.models import Company, CompanyContact
 from fair.models import RegistrationState
 from exhibitors.models import Exhibitor
@@ -30,8 +28,6 @@ def render_company(request, company, contact, exhibitor):
         return status.INVALID_REGISTRATION_PERIOD
 
 
-# Todo: remove in prod
-@csrf_exempt
 def submit(request):
     fair = get_fair()
     period = fair.get_period()
@@ -52,8 +48,6 @@ def submit(request):
     return submit_cr(request, company, fair, contact, exhibitor)
 
 
-# Todo: remove in prod
-@csrf_exempt
 def index(request):
     """
     Root endpoint for all information regarding the current complete registration
@@ -72,8 +66,6 @@ def index(request):
     return render_company(request, company, contact, exhibitor)
 
 
-# Todo: remove in prod
-@csrf_exempt
 def get_company(request, company_pk):
     company = Company.objects.filter(pk=company_pk).first()
     if not company: