fixed problem with authenticity token