zmieniono secret_token
dodano csrf_meta_tags do layout i skip_before_action verify_authenticity_token