revert to default protect_from_forgery with: :exception
skip verify_authenticity_token on Omniauth. TO BE FIXED
no debug on assets