Added typehint to @aiohttp_csrf.csrf_exempt.
Ideally this would be using a ParamSpec to be generic on arguments to the handler function it is decorating, however this is not compatible with 3.9.
For now expects to decorate basic handlers only:
async def handler(req: web.Request) -> web.StreamResponse:
...