added protect from forgery back to application controller