removed csrf middleware from gemfile
l 2 readme