removed gemfiles from travis config
added csrf token to applications root
using plain old xhr now, as it works much faster and reliable