Make the "invalid authenticity token" 403 error pretty like the others

- Users *shouldn't* see this, so don't include any extra information.