heroku test run to move bookmarklet.js
reinsert protect from forgery
show items on wishes.index