Use rails-csrf  from bower.