Remove CSRF stuff from ApplicationController

This is being handled by angular now.