Add CSRF gem to gemfile