wasn't requiring secure_xsrf_token.rb
Version bump to 0.3.5