Be nice to heroku and declare the ruby version
Don't need protect_from_forgery since non-web