no longer require CSRF check
Merge pull request #5 from everydayhero/rails-version-change

no longer require CSRF check