Add csrf-in-rails
Merge index.html