use jquery ujs and csrf protection