Added protect_from_forgery for safety and before_filter