protect_from_forgery with: :null_session
Enable scoped views in Devise