Added protect_from_forgery to ApplicationController