use ENV['DOORKEEPER_SITE_NAME'] as kind if set
add protect_from_forgery except
remove flash in previous page