Added authenticity token to HTML forms.
Use head request instead of get for home page graph.