Add csrf token for notes.
Update gems.