csrf tokens without form helpers! yay!
CSRF tokens without form_for! Yay!