adds bourbon neat and background to see 'asset pipeline'
(not important, but was in stash so might as well)
protect routes with csrf
use strongish params, show a flash message and errors