CSRF Token is required for non-GET request links

If you were to do a `link_to "Some Link", some_path, method: :delete` for example, it would previously fail as there was no CSRF token sent over as well. This fixes that.