updated devise to protect against CSRF attacks.
http://blog.plataformatec.com.br/2013/08/csrf-token-fixation-attacks-in-devise/