sign in works, need to generate and store a new CSRF token for rails