Add csrf_meta_tags to layout. Change delete link to http delete method. Fix routes.