added custom xsrf for madison per http://stackoverflow.com/questions/14734243/rails-csrf-protection-angular-js-protect-from-forgery-makes-me-to-log-out-on. logging users out of POST to the API.