Support Rails 4

@burke @gauravmc 

Our auth gem does not support rails 4. Changes:

* Routes must use `get` and `post` rather than `match`.
* The call to `routes.draw` must come from the app now (apparently).
* Protect from forgery syntax is different.