Add protect_from_forgery in ApplicationController