Do not add authenticity token to GET form

CSRF protection does not work in GET requests. It has no sense to add authenticity token to the form when http method is GET.